Organization isolation
Private data is associated with an organization and protected through permissions and database access policies.
Security and trust
We protect each organization’s private context.
Kumplio separates public knowledge from each company’s private context. Security is designed around authentication, authorization, data isolation, traceability and human review.
Authentication and memberships
Workspace access requires an authenticated account and a valid membership in the corresponding organization.
Traceable persistence
Missions, results, reviews and events preserve identifiers and relationships that allow work to be reconstructed.
Human review
AI-generated proposals require human validation when they affect legal, risk or compliance decisions.
Restricted access
Administrative functions and internal data are limited according to role and organization context.
Secure development
Kumplio applies input validation, authorization controls and change review before sensitive functionality is released.
Current scope
This page describes controls and principles currently applied by Kumplio. It does not claim external certifications, guaranteed availability or compliance with standards that have not yet been formally audited.
Security reporting
To report a vulnerability or potential incident, write to [email protected]. For privacy or vendor-assessment matters, use [email protected].
View security.txt